Credit data

Credit Data Policy

How credit information is collected, used and shared with Data Bureau (DCC) in Papua New Guinea — and the rights you have over it.

Source of record. Data Bureau publishes the authoritative description of its services and its own privacy and credit reporting policies at www.dc.com.pg. This page explains BukMasta's own handling of credit data and is written to sit alongside that policy. Where the two differ on a matter that is Data Bureau's to decide, theirs governs. We are working to synchronise this page directly with dc.com.pg.

Who Data Bureau is

Data Bureau, commonly referred to as DCC, operates credit reporting infrastructure in Papua New Guinea. Credit providers submit information about how customers meet their obligations, and may request a credit report when assessing an application. The purpose of a credit bureau is to give lenders an accurate, shared picture of a borrower's history so that credit decisions are based on evidence rather than assumption.

What credit data means here

Credit data covers information relating to credit obligations, which may include:

  • Identity details used to match a record to the right person or business — name, business name, IPA or registration number, contact details.
  • The existence, type and amount of a credit facility or account.
  • Repayment conduct, including whether payments were made on time.
  • Defaults, arrangements, and their subsequent settlement.
  • Credit applications and enquiries made about a record.

Why we collect and share it

Credit information is collected and shared for these purposes only:

  • Assessing an application for credit or a payment arrangement.
  • Verifying identity and confirming that a business is who it claims to be.
  • Managing an existing account, including collections where an amount falls overdue.
  • Meeting obligations under applicable Papua New Guinean law.

Credit data is never sold, and it is never used for marketing.

Your consent

Credit data is shared with Data Bureau only where you have consented. Consent is requested explicitly — not buried in general terms — and is recorded against your account with the date it was given. You may withdraw consent at any time, subject to any obligation that is still outstanding: withdrawal cannot erase the record of a facility that remains unpaid.

You can review or withdraw your consent from your account's terms and credit data page once signed in.

Your rights over your record

  • Access. You may ask what credit information is held about you.
  • Correction. If something is wrong, you may ask for it to be corrected. Tell us, and raise it with Data Bureau directly, as they hold the bureau record.
  • Explanation. If a credit decision went against you because of bureau information, you may ask which source was relied on.
  • Complaint. If a correction is not made, you may escalate to Data Bureau.

How long it is kept

Credit information is retained only as long as needed for the purposes above, or as long as the law requires — whichever is longer. Retention periods for the bureau record itself are set by Data Bureau, and are described in their policy at www.dc.com.pg.

How it is protected

Credit data is transmitted over encrypted connections and access is limited to the people whose work requires it. Every access and change is recorded in an audit trail, and access is removed as soon as it is no longer needed.

Questions

For anything about how BukMasta handles your credit data, get in touch. For the bureau record itself — what it contains, correcting it, or how long it is held — contact Data Bureau at www.dc.com.pg.

This page describes BukMasta's handling of credit data. It is not legal advice and does not replace Data Bureau's own published policies.